files2.us Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1011453 Security Researcher Gh05tPT Helped patch 6873 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting files2.us website and it...

CVE-2018-6873

CVE-2018-6873 affects Auth0 authentication service prior to 2017-10-15, where JWT audience validation was not performed, enabling privilege escalation. Multiple sources describe that the vulnerability allowed a remote attacker to authenticate as a higher-privilege user by forging or manipulating ...

CVE-2017-6873

Siemens OZW672 and OZW772 (all versions) are affected by CVE-2017-6873, where the integrated web server on port 443/TCP can be misused to read and manipulate data in TLS sessions during a MITM attack. The vulnerability is tied to missing authentication for a critical function. Impact is described...

CVE-2015-6873

...

CVE-2015-6873

CVE-2015-6873 is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-6873

Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

CVE-2016-6873

Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

CVE-2016-6873

Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

CVE-2016-6873

CVE-2016-6873 affects Facebook HHVM before 3.15.0. The vulnerability is caused by self recursion in the compact function, leading to unspecified impact via unknown vectors. Public records (NVD/NSS OSV) describe a high-severity, network-exploitable issue with potential partial confidentiality/inte...

CVE-2014-6873

The CVE-2014-6873 entry concerns the AMGC (com.amec.uae) Android application version 6.0 that does not verify X.509 certificates when establishing SSL connections. The root issue is improper SSL certificate validation, enabling man-in-the-middle attackers to spoof HTTPS servers and access sensiti...

CVE-2013-6873

CVE-2013-6873 affects Testa Online Test Management System (OTMS) 2.0.0.2. The vulnerability is an SQL injection in the test_id parameter that allows remote attackers to execute arbitrary SQL commands. Evidence in multiple feeds confirms the same description, including NVD entries. A CIRCL sightin...

CVE-2013-6873

creationtimestamp| type| source ---|---|--- 2013-11-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38842...

CVE-2008-6873

CVE-2008-6873 concerns a SQL injection vulnerability in Active Web Mail 4.0 . The flaw allows remote attackers to manipulate the database via the TabOpenQuickTab1 parameter on three pages: popaccounts.aspx, addressbook.aspx, and emails.aspx. The affected component is the web application’s input h...

CVE-2008-6873

SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to 1 popaccounts.aspx, 2 addressbook.aspx, and 3 emails.aspx...

CVE-2008-6873

creationtimestamp| type| source ---|---|--- 2008-11-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7288...

Sql injection

Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via the 1 artid parameter to mod.php in a viewarticle action publisher mod and the 2 bid parameter to banners.php in a click action. NOTE: the mod.php viewdisk and viewlink vectors are...

CVE-2006-6873

CVE-2006-6873 describes multiple SQL injection vulnerabilities in mod.php of eNdonesia 8.4. The affected component is the mod.php file, with vulnerable vectors via (1) the did parameter in a viewdisk operation and (2) the cid parameter in viewlink (katalog mod) or viewcat (diskusi mod). The under...